$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft File: C9q2CGF_PDGDxHD05hmyeV91w4k.mft (raw, json) Hash identifier: 0RIc4YlzU/Yj2RdtXrzUUgAiETmGjSg+Hl1fca4bOpA= Subject key identifier: B2:62:6A:76:09:6E:2B:A0:DE:4A:4C:E9:F3:62:FC:2F:42:D7:75:10 Authority key identifier: 0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 Certificate issuer: /CN=A91326B3/serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft Manifest number: 0107 Signing time: Sat 09 Aug 2025 05:28:32 +0000 Manifest this update: Sat 09 Aug 2025 05:28:32 +0000 Manifest next update: Sat 16 Aug 2025 05:28:32 +0000 Files and hashes: 1: C9q2CGF_PDGDxHD05hmyeV91w4k.crl (hash: 2k1kzgg1UI5cxxnug3xP5laObi9lFAkumRr8bGzCM4I=) 2: E3ABAA7AE69211EEB34D4B6AC4F9AE02.roa (hash: EyKD4I3R8YSy4asXY+8xvf07IP4owJwI772hb1AAhAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=0BDAB608617F3C3183C470F4E619B2795F75C389 Validity Not Before: Aug 9 05:28:32 2025 GMT Not After : Aug 16 05:28:32 2025 GMT Subject: CN=6896dc80-ee5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:2a:99:d3:86:21:31:31:60:46:7e:59:db: e1:a4:6d:39:ca:df:dd:9b:82:74:47:9e:a2:ec:6a: 34:3b:0f:20:91:35:e6:b2:c0:e6:0a:1f:4b:19:52: d6:0d:86:f2:cd:dd:5f:cf:49:1c:bd:5a:4c:c7:17: e7:8c:76:83:b5:d7:7a:47:cb:64:a6:ee:d3:67:b8: 0e:ff:d3:81:a7:d0:f6:00:bc:26:59:ff:2d:93:9f: e1:9f:8d:c4:81:3e:f7:5f:de:f2:57:c7:78:6a:74: f7:61:f4:34:81:e4:8d:06:eb:42:43:5f:0e:2c:40: 15:f1:e5:7f:03:3c:bf:45:a7:0c:e6:64:2e:5b:b8: 5e:78:6d:00:56:3a:b5:af:f9:29:72:fd:35:1d:de: f9:0b:18:56:48:a8:46:d4:1f:1f:62:fe:b7:46:e3: 1c:d0:be:69:72:49:af:1b:d1:65:74:bf:99:c5:e5: 53:d0:1b:b5:46:c1:32:bf:03:95:f3:de:bf:dd:57: 8d:f3:f8:61:67:68:b5:90:7c:fb:7b:ed:d2:15:6c: a0:1d:7b:d1:8f:77:70:11:4b:23:14:51:c9:77:5f: b8:14:39:43:0f:d6:aa:33:bb:d8:74:18:4f:70:18: 39:d9:41:ba:ea:51:88:eb:0d:92:1e:9c:b7:ca:60: 55:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:62:6A:76:09:6E:2B:A0:DE:4A:4C:E9:F3:62:FC:2F:42:D7:75:10 X509v3 Authority Key Identifier: keyid:0B:DA:B6:08:61:7F:3C:31:83:C4:70:F4:E6:19:B2:79:5F:75:C3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/C9q2CGF_PDGDxHD05hmyeV91w4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/C55423AAE69111EEBF058932C4F9AE02/C9q2CGF_PDGDxHD05hmyeV91w4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:ba:ac:f4:7d:8f:b0:d6:19:ef:da:3b:b5:26:28:31:ad:1f: ae:38:a3:7b:97:92:f4:db:3e:a5:a4:f3:ef:f0:6d:82:2e:d5: a2:ec:0c:81:c6:a4:c9:d4:5f:62:91:49:9f:e2:b8:ed:f8:61: 9a:3d:a2:a6:18:54:d3:35:a7:08:22:6f:12:fd:6f:85:53:de: 8d:d5:f0:4a:33:12:8a:f2:5e:8f:47:ac:cd:6d:0b:39:ca:a1: 4a:08:ae:0a:f8:5b:cd:eb:ea:32:c9:43:a8:c9:64:32:c8:41: fa:48:85:fc:a2:9e:9d:b4:6f:90:58:08:fc:29:5a:c0:c4:b8: 50:ed:be:6d:76:be:2f:0c:9a:bd:82:d3:6f:6b:81:8b:45:f3: ca:8d:41:3a:a5:27:5e:b3:d9:91:99:fb:c0:8d:fa:0e:f3:5b: 2e:9b:db:de:58:15:b0:1c:7c:cb:0b:90:2e:3a:d9:c2:97:61: d6:81:bf:57:ce:cb:75:d5:b1:67:d0:c9:de:3e:05:d0:63:7a: 5c:5b:a9:80:3c:24:55:25:bb:7d:6a:80:c3:a2:f3:33:c5:da: 64:fa:d4:02:ff:4b:70:6f:ba:24:bf:c9:df:73:38:5a:b4:53: 63:93:90:70:ec:f4:83:fc:34:48:58:eb:98:ce:a4:a4:a6:47: 1e:5e:34:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDBCREFCNjA4NjE3RjNDMzE4M0M0NzBGNEU2MTlCMjc5 NUY3NUMzODkwHhcNMjUwODA5MDUyODMyWhcNMjUwODE2MDUyODMyWjAYMRYwFAYD VQQDEw02ODk2ZGM4MC1lZTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/8qmdOGITExYEZ+WdvhpG05yt/dm4J0R56i7Go0Ow8gkTXmssDmCh9LGVLW DYbyzd1fz0kcvVpMxxfnjHaDtdd6R8tkpu7TZ7gO/9OBp9D2ALwmWf8tk5/hn43E gT73X97yV8d4anT3YfQ0geSNButCQ18OLEAV8eV/Azy/RacM5mQuW7heeG0AVjq1 r/kpcv01Hd75CxhWSKhG1B8fYv63RuMc0L5pckmvG9FldL+ZxeVT0Bu1RsEyvwOV 896/3VeN8/hhZ2i1kHz7e+3SFWygHXvRj3dwEUsjFFHJd1+4FDlDD9aqM7vYdBhP cBg52UG66lGI6w2SHpy3ymBVjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJianYJ biug3kpM6fNi/C9C13UQMB8GA1UdIwQYMBaAFAvatghhfzwxg8Rw9OYZsnlfdcOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DNTU0MjNBQUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BER0R4SEQwNWhteWVWOTF3 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0M5cTJDR0ZfUERHRHhIRDA1aG15ZVY5MXc0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DNTU0MjNBQUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9DOXEyQ0dGX1BE R0R4SEQwNWhteWVWOTF3NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDbuqz0fY+w1hnv2ju1JigxrR+uOKN7l5L02z6lpPPv8G2CLtWi7AyB xqTJ1F9ikUmf4rjt+GGaPaKmGFTTNacIIm8S/W+FU96N1fBKMxKK8l6PR6zNbQs5 yqFKCK4K+FvN6+oyyUOoyWQyyEH6SIX8op6dtG+QWAj8KVrAxLhQ7b5tdr4vDJq9 gtNva4GLRfPKjUE6pSdes9mRmfvAjfoO81sum9veWBWwHHzLC5AuOtnCl2HWgb9X zst11bFn0MnePgXQY3pcW6mAPCRVJbt9aoDDovMzxdpk+tQC/0twb7okv8nfczha tFNjk5Bw7PSD/DRIWOuYzqSkpkceXjTd -----END CERTIFICATE-----Generated at Sun Aug 10 04:28:12 2025 by rpki-client